6.2 Hazard Assessment, Risk Management, and Environmental Rules

6.2 Hazard Assessment, Risk Management, and Environmental Rules

Fundamental Engineering Definitions:

• Hazard: An inherent physical, chemical, biological, or operational condition with the potential to cause harm, injury, property damage, or environmental degradation.
• Risk: The quantitative measure of the likelihood (frequency or probability) that a hazard will result in an adverse event, combined with the severity (consequence) of that event.

$\text{Risk} = \text{Probability (Frequency)} \times \text{Severity (Consequence)}$

---

Quantitative Risk Assessment and Risk Matrices

Engineers use Risk Evaluation Matrices to standardize risk classification, prioritize corrective action budgets, and guide system redesign.

Qualitative Severity and Probability Categorization

1. Severity Classification Categories:

   • Catastrophic (Category I): Death, total system loss, severe environmental disaster.
   • Critical (Category II): Severe injury, major facility damage, significant environmental release.
   • Marginal (Category III): Minor injury, minor system damage, controllable release.
   • Negligible (Category IV): Less than minor injury, minimal system impact.

2. Probability Classification Categories:

   • Frequent (Level A): High probability of continuous or repeated occurrence ($P > 10^{-1}$ per year).
   • Probable (Level B): Likely to occur several times in system life ($10^{-2} < P \le 10^{-1}$).
   • Occasional (Level C): Likely to occur at least once in system life ($10^{-3} < P \le 10^{-2}$).
   • Remote (Level D): Unlikely but possible to occur ($10^{-6} < P \le 10^{-3}$).
   • Improbable (Level E): Highly unlikely ($P \le 10^{-6}$).

Standard 4x4 Risk Matrix Structure

---

Worked Engineering Problem 1: Quantitative Expected Risk Loss Analysis

Problem Statement:
An oil refinery is evaluating two alternative overpressure protection designs for a high-pressure hydrocracker vessel:

• Design Option A (Single Relief Valve): Probability of catastrophic overpressure failure $P_A = 2.0 \times 10^{-3}$ failures/year. Financial loss given failure $C_A = $10,000,000$.
• Design Option B (Redundant Relief Valves + Rupture Disk): Probability of failure $P_B = 1.5 \times 10^{-5}$ failures/year. Initial capital cost for Option B is $$150,000$. Financial loss given failure $C_B = $10,000,000$.

1. Calculate the annual expected risk financial loss for Design Option A and Design Option B.
2. Determine the net annual financial savings achieved by implementing Option B.
3. Calculate the simple payback period for investing in Design Option B.

Solution:

Step 1: Calculate annual expected risk loss ($R = P \times C$).

• For Design Option A:
  $R_A = P_A \times C_A = (2.0 \times 10^{-3} \text{ failures/yr}) \times 10,000,000 = 20,000 \text{ dollars/year}$
• For Design Option B:
  $R_B = P_B \times C_B = (1.5 \times 10^{-5} \text{ failures/yr}) \times 10,000,000 = 150 \text{ dollars/year}$

Step 2: Calculate net annual risk reduction savings.

$\text{Annual Savings} = R_A - R_B = 20,000 - 150 = 19,850 \text{ dollars/year}$

Step 3: Calculate simple payback period.

$\text{Payback Period} = \frac{\text{Capital Cost}}{\text{Annual Risk Savings}} = \frac{150,000}{19,850 / \text{yr}} = 7.556 \approx 7.56 \text{ years}$

Conclusion: Upgrading to redundant protection reduces risk by over $99%$, providing a strong engineering safety and financial justification.

System Safety Engineering Methods (FTA, ETA, FMEA, HAZOP, JSA)

FE Other Disciplines questions heavily test the identification and quantitative application of system safety analysis methodologies.

Comparison of System Safety Analysis Methodologies

---

Fault Tree Analysis (FTA) Quantitative Rules

Fault Tree Analysis evaluates how combinations of lower-level component failures (basic events) lead to a specific unwanted Top Event.

        AND Gate (All must occur)         OR Gate (Any single event occurs)
                 ┌───┐                             ┌───┐
                 │   │                             │   │
                 └───┘                             └───┘
                 /   \\                             /   
               [A]   [B]                         [A]   [B]
         P = P(A) * P(B)                   P = 1 - (1-P(A))(1-P(B))

1. AND Gate (Redundant / Joint Requirement)

An AND gate output occurs only if all input events occur simultaneously. For $n$ independent input events with failure probabilities $P_1, P_2, \dots, P_n$:

$P_{\text{AND}} = \prod_{i=1}^{n} P_i = P_1 \times P_2 \times \dots \times P_n$

2. OR Gate (Single Point / Alternative Failure)

An OR gate output occurs if at least one input event occurs. For $n$ independent input events:

$P_{\text{OR}} = 1 - \prod_{i=1}^{n} (1 - P_i) = 1 - (1 - P_1)(1 - P_2)\dots(1 - P_n)$

For small probabilities ($P_i \ll 0.1$), the rare-event approximation yields: $P_{\text{OR}} \approx \sum_{i=1}^{n} P_i$.

---

Failure Mode and Effects Analysis (FMEA) and Risk Priority Number

FMEA tabulates potential component failure modes and quantifies risk using the Risk Priority Number (RPN):

$\text{RPN} = \text{Severity } (S) \times \text{Occurrence } (O) \times \text{Detection } (D)$

• Severity ($S$): Rating from 1 (negligible effect) to 10 (catastrophic failure without warning).
• Occurrence ($O$): Rating from 1 (extremely unlikely frequency) to 10 (inevitable failure).
• Detection ($D$): Rating from 1 (certain detection before reaching user) to 10 (no mechanism to detect defect prior to failure).
• RPN values range from 1 to 1,000. Higher RPN values dictate mandatory engineering redesign.

---

Hazard and Operability Study (HAZOP) Guide Words

HAZOP applies systematic Guide Words to process design parameters (Flow, Temperature, Pressure, Level, Viscosity) to identify potential operational deviations:

---

Worked Engineering Problem 2: Multi-Gate Fault Tree Logic Calculation

Problem Statement:
A emergency backup cooling system for a nuclear research reactor operates as shown in the system logic description below:

• The Top Event is "Loss of Emergency Cooling Water Flow".
• Loss of flow occurs if Pump System Fails OR Emergency Power Fails (connected via an OR Gate).
• The Pump System consists of two redundant active pumps ($P_1$ and $P_2$) operating in parallel; the Pump System fails only if both Pump 1 and Pump 2 fail (connected via an AND Gate).
• The basic event failure probabilities over a 1,000-hour mission are:
  • $P(P_1) = 0.04$
  • $P(P_2) = 0.04$
  • $P(\text{Power}) = 0.02$

Calculate the exact probability of the Top Event ($P_{\text{Top}}$).

Solution:

Step 1: Compute failure probability of the Pump System ($P_{\text{pumps}}$).
Since Pump 1 and Pump 2 are joined by an AND gate:

$P_{\text{pumps}} = P(P_1) \times P(P_2) = 0.04 \times 0.04 = 0.0016$

Step 2: Combine Pump System failure and Power failure via OR gate.
Using the exact Boolean probability formula for independent events under an OR gate:

$P_{\text{Top}} = 1 - (1 - P_{\text{pumps}})(1 - P(\text{Power}))$ $P_{\text{Top}} = 1 - (1 - 0.0016)(1 - 0.02)$ $P_{\text{Top}} = 1 - (0.9984 \times 0.9800) = 1 - 0.978432 = 0.021568$

Conclusion: The probability of loss of cooling water flow during the mission is $0.021568$ (or $2.16%$).

Federal Environmental Regulations: Hazardous Waste (RCRA & CERCLA)

Environmental engineering compliance on the FE exam focuses on major U.S. federal environmental statutes administered by the U.S. Environmental Protection Agency (EPA).

Resource Conservation and Recovery Act (RCRA)

Passed in 1976, RCRA regulates active hazardous waste generation, transportation, treatment, storage, and disposal. Its primary mandate is establishing "Cradle-to-Grave" tracking of hazardous waste using mandatory Uniform Hazardous Waste Manifests.

Definition and Classification of RCRA Hazardous Wastes

A solid material is classified as a RCRA Hazardous Waste if it is not specifically excluded and meets either Listed Waste or Characteristic Waste criteria:

1. Listed Wastes:

   • F-List: Wastes from non-specific industrial sources (e.g., spent halogenated degreasing solvents).
   • K-List: Wastes from specific industrial sectors (e.g., petroleum refining sludge).
   • P-List & U-List: Discarded commercial chemical products in unused pure form ($P = \text{acutely hazardous}$; $U = \text{toxic}$).

2. Characteristic Wastes (D-List):

               RCRA HAZARDOUS WASTE CLASSIFICATION
                              │
        ┌─────────────────────┴─────────────────────┐
        ▼                                           ▼
  LISTED WASTES                               CHARACTERISTIC WASTES
(F, K, P, U Lists)                             (D001 - D043)
  • F: Non-specific process                    • Ignitability (flashpoint < 60°C)
  • K: Specific industry                       • Corrosivity (pH <= 2 or >= 12.5)
  • P: Acutely toxic commercial                • Reactivity (unstable / explosive)
  • U: Toxic commercial chemical               • Toxicity (TCLP test threshold)

---

Comprehensive Environmental Response, Compensation, and Liability Act (CERCLA / Superfund)

Enacted in 1980, CERCLA (commonly called Superfund) addresses historical, abandoned, or inactive hazardous waste sites.

Key Provisions of CERCLA:

• National Priorities List (NPL): EPA's prioritized list of contaminated sites requiring long-term remedial cleanup.
• Reportable Quantities (RQ): Immediate notification to the National Response Center (NRC) is mandated if a release of a hazardous substance equals or exceeds its chemical-specific RQ within 24 hours.
• Potentially Responsible Parties (PRPs): Generates liability for past and current site owners, operators, waste generators, and transporters.
• Liability Structure: Enforces Strict, Joint, and Several, and Retroactive Liability:
  • Strict Liability: Liability imposed regardless of fault or negligence.
  • Joint and Several Liability: Any single PRP can be held liable for $100%$ of total cleanup costs, regardless of their individual contribution fraction.
  • Retroactive Liability: Applies to waste disposal actions performed before CERCLA was enacted in 1980.

Air & Water Quality Statutes: Clean Air Act, Clean Water Act, SDWA

Clean Air Act (CAA)

The Clean Air Act regulates stationary and mobile sources of air pollution.

1. National Ambient Air Quality Standards (NAAQS)

Under Title I of the CAA, EPA establishes primary (public health) and secondary (public welfare) standards for 6 Criteria Air Pollutants:

2. Hazardous Air Pollutants (HAPs) and NESHAP

• The CAA lists 187 Hazardous Air Pollutants (HAPs) (toxic compounds such as benzene, formaldehyde, asbestos, vinyl chloride) regulated under National Emission Standards for Hazardous Air Pollutants (NESHAP).
• Major stationary industrial sources must apply Maximum Achievable Control Technology (MACT).
• Title V Operating Permits: Mandated for major sources emitting $> 100 \text{ tons/year}$ of criteria pollutants or $> 10 \text{ tons/year}$ of any single HAP.

---

Clean Water Act (CWA)

The Clean Water Act regulates pollutant discharges into "Waters of the United States" (WOTUS).

Key CWA Regulatory Mechanisms:

• NPDES Permits: The National Pollutant Discharge Elimination System (NPDES) prohibits any point source discharge of pollutants into navigable surface waters without an EPA/state permit.
• Point Source vs. Non-Point Source:
  • Point Source: Any discernible, confined, and discrete conveyance (e.g., pipe, ditch, channel, tunnel, vessel discharge).
  • Non-Point Source: Diffuse agricultural runoff, urban stormwater runoff, unchanneled rainfall.
• Effluent Limitations & Water Quality Parameters: Sets discharge caps on 5-day Biochemical Oxygen Demand ($\text{BOD}_5$), Total Suspended Solids ($\text{TSS}$), pH, and oil/grease.
• Publicly Owned Treatment Works (POTWs): Municipal wastewater facilities receiving industrial pre-treatment discharges.

---

Safe Drinking Water Act (SDWA)

The Safe Drinking Water Act protects public drinking water supply systems serving $\ge 25$ people or $\ge 15$ service connections year-round.

---

Worked Engineering Problem 3: FMEA Risk Priority Number and Mitigation Threshold

Problem Statement:
An engineering risk team performs an FMEA on an automated robotic welding cell. For the failure mode "Welding Torch Cable Insulation Breakdown Causing Arc Short Circuit", the team assigns initial ratings:

• Severity ($S$) = 8 (severe electrical fire hazard and equipment destruction).
• Occurrence ($O$) = 6 (frequent cable flexing leads to high failure rate).
• Detection ($D$) = 7 (no automatic electrical leak detection; relies on visual smoke detection).

1. Calculate the initial Risk Priority Number ($\text{RPN}_{\text{initial}}$).
2. If plant safety policy mandates engineering mitigation for any failure mode with $\text{RPN} > 120$, determine if corrective action is required.
3. The engineering team installs an inline ground-fault circuit interrupter (GFCI) and current-monitoring relay, improving the Detection rating to $D = 2$. Calculate the updated $\text{RPN}_{\text{mitigated}}$ and evaluate compliance.

Solution:

Step 1: Calculate initial RPN.

$\text{RPN}_{\text{initial}} = S \times O \times D = 8 \times 6 \times 7 = 336$

Step 2: Evaluate mitigation requirement.
Since $\text{RPN}_{\text{initial}} = 336 > 120$, mandatory engineering intervention is required.

Step 3: Calculate mitigated RPN.

$\text{RPN}_{\text{mitigated}} = S \times O \times D_{\text{new}} = 8 \times 6 \times 2 = 96$

Conclusion: The engineering control drops the RPN to $96 \le 120$, satisfying company risk standards.